ww1.mtalk.google.com.tianxian2.com/
37.48.65.153 495 B URL ww1.mtalk.google.com.tianxian2.com/
IP 37.48.65.153:0
ASN #60781 LeaseWeb Netherlands B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (495), with no line terminators
Hash 929deb0b2bf8362cd7f7f0ff71fe94b6
3e070d5654438cd7d74bdd976c2e829f8657d97c
d2dcf8d0497c6d2cbc89e288cc218a018e6f29e5de50f717e963759ecb19eff0
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: ww1.mtalk.google.com.tianxian2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 495
content-type: text/html; charset=utf-8
date: Sat, 15 Apr 2023 11:35:48 GMT
server: nginx
set-cookie: sid=ab15a5de-db81-11ed-8f72-b466bc8858db; path=/; domain=.tianxian2.com; expires=Thu, 03 May 2091 14:49:55 GMT; max-age=2147483647; HttpOnly
ww1.mtalk.google.com.tianxian2.com/favicon.ico
37.48.65.153 9 B URL ww1.mtalk.google.com.tianxian2.com/favicon.ico
IP 37.48.65.153:0
ASN #60781 LeaseWeb Netherlands B.V.
File type ASCII text, with no line terminators
Hash d8f4a1993546cc4b850cde3599e27aec
094b763b4cfcc0b05e5d040581cd513c3ca08067
907ba78b4545338d3539683e63ecb51cf51c10adc9dabd86e92bd52339f298b9
GET /favicon.ico HTTP/1.1
Host: ww1.mtalk.google.com.tianxian2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ww1.mtalk.google.com.tianxian2.com/
Cookie: sid=ab15a5de-db81-11ed-8f72-b466bc8858db
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 9
date: Sat, 15 Apr 2023 11:35:48 GMT
server: nginx
ww1.mtalk.google.com.tianxian2.com/?ch=1&js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTY4MTU2NTc0OCwiaWF0IjoxNjgxNTU4NTQ4LCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIydGIxaDVwbWJlaDZhMDhlYXMxN2o1Z2UiLCJuYmYiOjE2ODE1NTg1NDgsInRzIjoxNjgxNTU4NTQ4NjAwNTA0fQ.xvg3kE-tn-QQu8_StSvcb1RCB1SyYAUGJfFGV8wocbY&sid=ab15a5de-db81-11ed-8f72-b466bc8858db
37.48.65.153302 Found 11 B URL User Request GET HTTP/1.1 ww1.mtalk.google.com.tianxian2.com/?ch=1&js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTY4MTU2NTc0OCwiaWF0IjoxNjgxNTU4NTQ4LCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIydGIxaDVwbWJlaDZhMDhlYXMxN2o1Z2UiLCJuYmYiOjE2ODE1NTg1NDgsInRzIjoxNjgxNTU4NTQ4NjAwNTA0fQ.xvg3kE-tn-QQu8_StSvcb1RCB1SyYAUGJfFGV8wocbY&sid=ab15a5de-db81-11ed-8f72-b466bc8858db
IP 37.48.65.153:80
ASN #60781 LeaseWeb Netherlands B.V.
File type ASCII text, with no line terminators
Hash 32682312d17c7cbf18e73594f5570319
60e22121bdd0bc71cdb2bae2a3aa577006b2eae9
e55fb1a1d731153e943b68844af12dcce8bfac917c98ffdea64c80da0607dd47
GET /?ch=1&js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTY4MTU2NTc0OCwiaWF0IjoxNjgxNTU4NTQ4LCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIydGIxaDVwbWJlaDZhMDhlYXMxN2o1Z2UiLCJuYmYiOjE2ODE1NTg1NDgsInRzIjoxNjgxNTU4NTQ4NjAwNTA0fQ.xvg3kE-tn-QQu8_StSvcb1RCB1SyYAUGJfFGV8wocbY&sid=ab15a5de-db81-11ed-8f72-b466bc8858db HTTP/1.1
Host: ww1.mtalk.google.com.tianxian2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ww1.mtalk.google.com.tianxian2.com/
Cookie: sid=ab15a5de-db81-11ed-8f72-b466bc8858db
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 11
date: Sat, 15 Apr 2023 11:35:48 GMT
location: http://dnavexch.com/click?data=cFRkVTVFeW5sLXRqZ09mRW9BUXhfNlMwRmItYkdwOVJKNTRQTHd2ZUV0VUhJUWVybjZxejJrRFZFZ1N0dkNDWjdxeU1IeFFZdTh6cVlkNG5IU3dfdkZmbTBtSWplTVRIRmpjd1dRdWs2TGtlSEkxWmRCU3hGTmxXOHk5TFhIZmc1QmZGSzhNVXZFZWZubG9PMGp0bWR3Mg2&id=8c342064-754e-45db-a1c4-a7895c9a917f
server: nginx
set-cookie: sid=ab15a5de-db81-11ed-8f72-b466bc8858db; path=/; domain=.tianxian2.com; expires=Thu, 03 May 2091 14:49:56 GMT; max-age=2147483647; HttpOnly
dnavexch.com/click?data=cFRkVTVFeW5sLXRqZ09mRW9BUXhfNlMwRmItYkdwOVJKNTRQTHd2ZUV0VUhJUWVybjZxejJrRFZFZ1N0dkNDWjdxeU1IeFFZdTh6cVlkNG5IU3dfdkZmbTBtSWplTVRIRmpjd1dRdWs2TGtlSEkxWmRCU3hGTmxXOHk5TFhIZmc1QmZGSzhNVXZFZWZubG9PMGp0bWR3Mg2&id=8c342064-754e-45db-a1c4-a7895c9a917f
192.99.158.241200 OK 5.5 kB URL User Request GET HTTP/1.1 dnavexch.com/click?data=cFRkVTVFeW5sLXRqZ09mRW9BUXhfNlMwRmItYkdwOVJKNTRQTHd2ZUV0VUhJUWVybjZxejJrRFZFZ1N0dkNDWjdxeU1IeFFZdTh6cVlkNG5IU3dfdkZmbTBtSWplTVRIRmpjd1dRdWs2TGtlSEkxWmRCU3hGTmxXOHk5TFhIZmc1QmZGSzhNVXZFZWZubG9PMGp0bWR3Mg2&id=8c342064-754e-45db-a1c4-a7895c9a917f
IP 192.99.158.241:80
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (349), with CRLF line terminators
Hash b986972f1634e43cceefa75cf3f7fceb
514e05ff91e770f43333b09f9e0c9285cad5a2d4
d7bb7bbd41d4ad7a459a08ec50196e3c8da19d77376358fe73230dec6aa664d7
GET /click?data=cFRkVTVFeW5sLXRqZ09mRW9BUXhfNlMwRmItYkdwOVJKNTRQTHd2ZUV0VUhJUWVybjZxejJrRFZFZ1N0dkNDWjdxeU1IeFFZdTh6cVlkNG5IU3dfdkZmbTBtSWplTVRIRmpjd1dRdWs2TGtlSEkxWmRCU3hGTmxXOHk5TFhIZmc1QmZGSzhNVXZFZWZubG9PMGp0bWR3Mg2&id=8c342064-754e-45db-a1c4-a7895c9a917f HTTP/1.1
Host: dnavexch.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ww1.mtalk.google.com.tianxian2.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/html; charset=utf-8
Server: Microsoft-IIS/10.0
X-AspNetMvc-Version: 5.2
X-AspNet-Version: 4.0.30319
Set-Cookie: FsRNnwkuFGMSJMg=FsRNnwkuFGMSJMg; path=/
X-Powered-By: ASP.NET
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: Content-Type
Date: Sat, 15 Apr 2023 11:35:48 GMT
Content-Length: 5470
192.99.158.241302 Found 2.0 kB URL User Request POST HTTP/1.1 IP 192.99.158.241:80
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (1904), with CRLF line terminators
Hash fd5e2b8039f07ea6ff003edc2c3df328
a1341d8af992e1d079a4d62917198d9e9cd985a5
6dbc03256f4ec70a0a2bfa5844104fc592186b1955b7f2b8ece0050431985dc1
Analyzer Verdict Alert fortinet Spam
POST /Redirect/ HTTP/1.1
Host: dnavexch.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Content-Length: 359
Origin: http://dnavexch.com
Connection: keep-alive
Referer: http://dnavexch.com/click?data=cFRkVTVFeW5sLXRqZ09mRW9BUXhfNlMwRmItYkdwOVJKNTRQTHd2ZUV0VUhJUWVybjZxejJrRFZFZ1N0dkNDWjdxeU1IeFFZdTh6cVlkNG5IU3dfdkZmbTBtSWplTVRIRmpjd1dRdWs2TGtlSEkxWmRCU3hGTmxXOHk5TFhIZmc1QmZGSzhNVXZFZWZubG9PMGp0bWR3Mg2&id=8c342064-754e-45db-a1c4-a7895c9a917f
Cookie: FsRNnwkuFGMSJMg=FsRNnwkuFGMSJMg
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Cache-Control: private
Content-Type: text/html; charset=utf-8
Location: https://myckdom.com/aS/feedclick?s=HFz5zNIIs95ROWPasgEEzxpRTG9mCZxJfSMU3tyux_woPqiJVE9nxxwSB56cKSkXT2CTCm3P5TxbC7U30TJp2YOe9KpoUqG_Yk3WGBAOOFmJScwobXG_fWvoc-pzn9Pld-YQ1hdtbM02XpEZOwFKSSEuT-3FK3DmSAb_WtCsQesn1zTU7nJIByDMr4Fg9S_pA3W1dRY7-F0naZg7OmQYkT-Lym_xiTU5ETVWb-slG2vodsm2UV6vn_5ZWfxHxJ9xpfCpvePGFXB_A82GNSF24dMrFvK0OcPDsG9WL9aNgsQEB5l4e28xb-gIek5r98X83bvlEvEttHpJg_U4UFWiTCL-zxHSkGkW7XMqgH2nhcnGRVO0_LZi3bzjwYD3W89YC8lgFedWk2SJk2c8sM4pY90Vg3R-kc-1PuYLoViScRvaaBtuX2oxqtQrmVNXp8D-ANQPwgHmt-fAn1VtwGdbARAaMBFOmzH9JGd5VM8fwIeMTvxFBLW7681ABIuyzKBUs0IwlucNGYD5e8ESBeHMP3Dufw2oR7bExyrcWd0Kupxy80qQc3vqJ4_6zLEGtQvUfCRrrx5uzuo5A7AvtXicK1Pi3dqdhAhKViKytMUyJlj2lpG5-JJ9-SEJoaNcFU5L5IAujtpgPaZvjPogh6MZCpDnjPYQjokvQZhqeG081jBKc2Kg-AdPe6bSFriz_U1azgxIgTe3MGvbinG71Vu82JKUxEl8iBYaqxKQr5k2k8oe6g6InqqXPc2Y2xUdqcnGari6IlUqpXHVlv_TNyaYY_YHuxRO9gzWIqdTv6pZdQvbWH0DpDjFM2sdQYEUwNuD9Nak3l3QNxROp2iVQ1bkERuU_Rbq87iWlOTboLscb0ouWCVQwVuaUs-VjDFtGGgE08KOBOg59yd_XhRz5aRcLT0XW_yZlS-9TE7dJZYVAovzDKSXy7z6r_Xg_tn_i1KVvMEm75e94tf1P8ItL4Tayvv_D3kuZePLCnEg3SinXM8udnlNv_TwFSv_76gZ0x4ifpCDMYhoapbXmfHYDu5Kgazvjle0WRB719MdBk7f58_RZT-pcrY67o_uLvgGjXSBy03O32f-VXLIx8fxdCoS8t-OVcUaayrnMVQR88FlJoZXmt21z0-_jZRR3Oy-xFLCyFsMeeqr7AfWz_pI3_0G3iZJ7oUoyrlfmWpQ72bc4t3Hx47DhhZ146qPnfQWoodQ1iSnaG39La6iVkSlR8KVKOfPym_ZVj6JhuBNIgENpmaqA_MvBjcAQBh8FM1DolkmeDBEanPsRxxcTQtRPdux7T0LMSdHXhlfCTnoKjeRsT1oVj_Y6M0yg9gS6RfJr3XB0QaSyll-xFFzk6bOVyRFK_lfsL8V505BB9_V1C4UKoJBrjoXfvfE9MGXpppiglg-gAfW9Wo0ld-QKhdS2gp4ejZLPnSLwd45RiXcN_teTKG12N2hIDmK13XkhxK-gQAxvOE8dpCHf71ndcQ015vO6wP5G2oPQOEnvrfTGc4v1LwRNcTiVf-Bj6lrAxzneFO4gXI-FS1UeDQHXlTpyZaL_Ikznj7fS5I_a-_oubjwFblQWEWYoFYvhIPObqb1pFD2I6CiOOWfbf9QtuAQwulWiI0bYtXdmST4Y4HZ8X7cx-dtn53rDuWyAZoGNXJPz4EGWcHocYItxNRThJf6mLOOURlqcqmAF7NKNcFm5HHOzCYmApFMVgL7Ncvd6DYm5w86fBGTplkZqQ8hYzcek6I_ZM5cHZ3qkg57qWsDHOd4U7iBcj4VLVR4NNPExdJ3McGJby5Nj1Btmg2ssiZtp6uMW-aHrLZE3F_n
Server: Microsoft-IIS/10.0
X-AspNetMvc-Version: 5.2
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: Content-Type
Date: Sat, 15 Apr 2023 11:35:49 GMT
Content-Length: 1976
myckdom.com/aS/feedclick?s=HFz5zNIIs95ROWPasgEEzxpRTG9mCZxJfSMU3tyux_woPqiJVE9nxxwSB56cKSkXT2CTCm3P5TxbC7U30TJp2YOe9KpoUqG_Yk3WGBAOOFmJScwobXG_fWvoc-pzn9Pld-YQ1hdtbM02XpEZOwFKSSEuT-3FK3DmSAb_WtCsQesn1zTU7nJIByDMr4Fg9S_pA3W1dRY7-F0naZg7OmQYkT-Lym_xiTU5ETVWb-slG2vodsm2UV6vn_5ZWfxHxJ9xpfCpvePGFXB_A82GNSF24dMrFvK0OcPDsG9WL9aNgsQEB5l4e28xb-gIek5r98X83bvlEvEttHpJg_U4UFWiTCL-zxHSkGkW7XMqgH2nhcnGRVO0_LZi3bzjwYD3W89YC8lgFedWk2SJk2c8sM4pY90Vg3R-kc-1PuYLoViScRvaaBtuX2oxqtQrmVNXp8D-ANQPwgHmt-fAn1VtwGdbARAaMBFOmzH9JGd5VM8fwIeMTvxFBLW7681ABIuyzKBUs0IwlucNGYD5e8ESBeHMP3Dufw2oR7bExyrcWd0Kupxy80qQc3vqJ4_6zLEGtQvUfCRrrx5uzuo5A7AvtXicK1Pi3dqdhAhKViKytMUyJlj2lpG5-JJ9-SEJoaNcFU5L5IAujtpgPaZvjPogh6MZCpDnjPYQjokvQZhqeG081jBKc2Kg-AdPe6bSFriz_U1azgxIgTe3MGvbinG71Vu82JKUxEl8iBYaqxKQr5k2k8oe6g6InqqXPc2Y2xUdqcnGari6IlUqpXHVlv_TNyaYY_YHuxRO9gzWIqdTv6pZdQvbWH0DpDjFM2sdQYEUwNuD9Nak3l3QNxROp2iVQ1bkERuU_Rbq87iWlOTboLscb0ouWCVQwVuaUs-VjDFtGGgE08KOBOg59yd_XhRz5aRcLT0XW_yZlS-9TE7dJZYVAovzDKSXy7z6r_Xg_tn_i1KVvMEm75e94tf1P8ItL4Tayvv_D3kuZePLCnEg3SinXM8udnlNv_TwFSv_76gZ0x4ifpCDMYhoapbXmfHYDu5Kgazvjle0WRB719MdBk7f58_RZT-pcrY67o_uLvgGjXSBy03O32f-VXLIx8fxdCoS8t-OVcUaayrnMVQR88FlJoZXmt21z0-_jZRR3Oy-xFLCyFsMeeqr7AfWz_pI3_0G3iZJ7oUoyrlfmWpQ72bc4t3Hx47DhhZ146qPnfQWoodQ1iSnaG39La6iVkSlR8KVKOfPym_ZVj6JhuBNIgENpmaqA_MvBjcAQBh8FM1DolkmeDBEanPsRxxcTQtRPdux7T0LMSdHXhlfCTnoKjeRsT1oVj_Y6M0yg9gS6RfJr3XB0QaSyll-xFFzk6bOVyRFK_lfsL8V505BB9_V1C4UKoJBrjoXfvfE9MGXpppiglg-gAfW9Wo0ld-QKhdS2gp4ejZLPnSLwd45RiXcN_teTKG12N2hIDmK13XkhxK-gQAxvOE8dpCHf71ndcQ015vO6wP5G2oPQOEnvrfTGc4v1LwRNcTiVf-Bj6lrAxzneFO4gXI-FS1UeDQHXlTpyZaL_Ikznj7fS5I_a-_oubjwFblQWEWYoFYvhIPObqb1pFD2I6CiOOWfbf9QtuAQwulWiI0bYtXdmST4Y4HZ8X7cx-dtn53rDuWyAZoGNXJPz4EGWcHocYItxNRThJf6mLOOURlqcqmAF7NKNcFm5HHOzCYmApFMVgL7Ncvd6DYm5w86fBGTplkZqQ8hYzcek6I_ZM5cHZ3qkg57qWsDHOd4U7iBcj4VLVR4NNPExdJ3McGJby5Nj1Btmg2ssiZtp6uMW-aHrLZE3F_n
52.117.247.211302 Found 0 B URL User Request GET HTTP/2 myckdom.com/aS/feedclick?s=HFz5zNIIs95ROWPasgEEzxpRTG9mCZxJfSMU3tyux_woPqiJVE9nxxwSB56cKSkXT2CTCm3P5TxbC7U30TJp2YOe9KpoUqG_Yk3WGBAOOFmJScwobXG_fWvoc-pzn9Pld-YQ1hdtbM02XpEZOwFKSSEuT-3FK3DmSAb_WtCsQesn1zTU7nJIByDMr4Fg9S_pA3W1dRY7-F0naZg7OmQYkT-Lym_xiTU5ETVWb-slG2vodsm2UV6vn_5ZWfxHxJ9xpfCpvePGFXB_A82GNSF24dMrFvK0OcPDsG9WL9aNgsQEB5l4e28xb-gIek5r98X83bvlEvEttHpJg_U4UFWiTCL-zxHSkGkW7XMqgH2nhcnGRVO0_LZi3bzjwYD3W89YC8lgFedWk2SJk2c8sM4pY90Vg3R-kc-1PuYLoViScRvaaBtuX2oxqtQrmVNXp8D-ANQPwgHmt-fAn1VtwGdbARAaMBFOmzH9JGd5VM8fwIeMTvxFBLW7681ABIuyzKBUs0IwlucNGYD5e8ESBeHMP3Dufw2oR7bExyrcWd0Kupxy80qQc3vqJ4_6zLEGtQvUfCRrrx5uzuo5A7AvtXicK1Pi3dqdhAhKViKytMUyJlj2lpG5-JJ9-SEJoaNcFU5L5IAujtpgPaZvjPogh6MZCpDnjPYQjokvQZhqeG081jBKc2Kg-AdPe6bSFriz_U1azgxIgTe3MGvbinG71Vu82JKUxEl8iBYaqxKQr5k2k8oe6g6InqqXPc2Y2xUdqcnGari6IlUqpXHVlv_TNyaYY_YHuxRO9gzWIqdTv6pZdQvbWH0DpDjFM2sdQYEUwNuD9Nak3l3QNxROp2iVQ1bkERuU_Rbq87iWlOTboLscb0ouWCVQwVuaUs-VjDFtGGgE08KOBOg59yd_XhRz5aRcLT0XW_yZlS-9TE7dJZYVAovzDKSXy7z6r_Xg_tn_i1KVvMEm75e94tf1P8ItL4Tayvv_D3kuZePLCnEg3SinXM8udnlNv_TwFSv_76gZ0x4ifpCDMYhoapbXmfHYDu5Kgazvjle0WRB719MdBk7f58_RZT-pcrY67o_uLvgGjXSBy03O32f-VXLIx8fxdCoS8t-OVcUaayrnMVQR88FlJoZXmt21z0-_jZRR3Oy-xFLCyFsMeeqr7AfWz_pI3_0G3iZJ7oUoyrlfmWpQ72bc4t3Hx47DhhZ146qPnfQWoodQ1iSnaG39La6iVkSlR8KVKOfPym_ZVj6JhuBNIgENpmaqA_MvBjcAQBh8FM1DolkmeDBEanPsRxxcTQtRPdux7T0LMSdHXhlfCTnoKjeRsT1oVj_Y6M0yg9gS6RfJr3XB0QaSyll-xFFzk6bOVyRFK_lfsL8V505BB9_V1C4UKoJBrjoXfvfE9MGXpppiglg-gAfW9Wo0ld-QKhdS2gp4ejZLPnSLwd45RiXcN_teTKG12N2hIDmK13XkhxK-gQAxvOE8dpCHf71ndcQ015vO6wP5G2oPQOEnvrfTGc4v1LwRNcTiVf-Bj6lrAxzneFO4gXI-FS1UeDQHXlTpyZaL_Ikznj7fS5I_a-_oubjwFblQWEWYoFYvhIPObqb1pFD2I6CiOOWfbf9QtuAQwulWiI0bYtXdmST4Y4HZ8X7cx-dtn53rDuWyAZoGNXJPz4EGWcHocYItxNRThJf6mLOOURlqcqmAF7NKNcFm5HHOzCYmApFMVgL7Ncvd6DYm5w86fBGTplkZqQ8hYzcek6I_ZM5cHZ3qkg57qWsDHOd4U7iBcj4VLVR4NNPExdJ3McGJby5Nj1Btmg2ssiZtp6uMW-aHrLZE3F_n
IP 52.117.247.211:443
Certificate IssuerSectigo Limited
Subject*.myckdom.com
FingerprintC3:7B:F3:48:A1:46:69:95:EE:19:75:CE:1A:EA:F9:AD:EF:C7:25:77
ValidityMon, 20 Mar 2023 00:00:00 GMT - Wed, 20 Mar 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /aS/feedclick?s=HFz5zNIIs95ROWPasgEEzxpRTG9mCZxJfSMU3tyux_woPqiJVE9nxxwSB56cKSkXT2CTCm3P5TxbC7U30TJp2YOe9KpoUqG_Yk3WGBAOOFmJScwobXG_fWvoc-pzn9Pld-YQ1hdtbM02XpEZOwFKSSEuT-3FK3DmSAb_WtCsQesn1zTU7nJIByDMr4Fg9S_pA3W1dRY7-F0naZg7OmQYkT-Lym_xiTU5ETVWb-slG2vodsm2UV6vn_5ZWfxHxJ9xpfCpvePGFXB_A82GNSF24dMrFvK0OcPDsG9WL9aNgsQEB5l4e28xb-gIek5r98X83bvlEvEttHpJg_U4UFWiTCL-zxHSkGkW7XMqgH2nhcnGRVO0_LZi3bzjwYD3W89YC8lgFedWk2SJk2c8sM4pY90Vg3R-kc-1PuYLoViScRvaaBtuX2oxqtQrmVNXp8D-ANQPwgHmt-fAn1VtwGdbARAaMBFOmzH9JGd5VM8fwIeMTvxFBLW7681ABIuyzKBUs0IwlucNGYD5e8ESBeHMP3Dufw2oR7bExyrcWd0Kupxy80qQc3vqJ4_6zLEGtQvUfCRrrx5uzuo5A7AvtXicK1Pi3dqdhAhKViKytMUyJlj2lpG5-JJ9-SEJoaNcFU5L5IAujtpgPaZvjPogh6MZCpDnjPYQjokvQZhqeG081jBKc2Kg-AdPe6bSFriz_U1azgxIgTe3MGvbinG71Vu82JKUxEl8iBYaqxKQr5k2k8oe6g6InqqXPc2Y2xUdqcnGari6IlUqpXHVlv_TNyaYY_YHuxRO9gzWIqdTv6pZdQvbWH0DpDjFM2sdQYEUwNuD9Nak3l3QNxROp2iVQ1bkERuU_Rbq87iWlOTboLscb0ouWCVQwVuaUs-VjDFtGGgE08KOBOg59yd_XhRz5aRcLT0XW_yZlS-9TE7dJZYVAovzDKSXy7z6r_Xg_tn_i1KVvMEm75e94tf1P8ItL4Tayvv_D3kuZePLCnEg3SinXM8udnlNv_TwFSv_76gZ0x4ifpCDMYhoapbXmfHYDu5Kgazvjle0WRB719MdBk7f58_RZT-pcrY67o_uLvgGjXSBy03O32f-VXLIx8fxdCoS8t-OVcUaayrnMVQR88FlJoZXmt21z0-_jZRR3Oy-xFLCyFsMeeqr7AfWz_pI3_0G3iZJ7oUoyrlfmWpQ72bc4t3Hx47DhhZ146qPnfQWoodQ1iSnaG39La6iVkSlR8KVKOfPym_ZVj6JhuBNIgENpmaqA_MvBjcAQBh8FM1DolkmeDBEanPsRxxcTQtRPdux7T0LMSdHXhlfCTnoKjeRsT1oVj_Y6M0yg9gS6RfJr3XB0QaSyll-xFFzk6bOVyRFK_lfsL8V505BB9_V1C4UKoJBrjoXfvfE9MGXpppiglg-gAfW9Wo0ld-QKhdS2gp4ejZLPnSLwd45RiXcN_teTKG12N2hIDmK13XkhxK-gQAxvOE8dpCHf71ndcQ015vO6wP5G2oPQOEnvrfTGc4v1LwRNcTiVf-Bj6lrAxzneFO4gXI-FS1UeDQHXlTpyZaL_Ikznj7fS5I_a-_oubjwFblQWEWYoFYvhIPObqb1pFD2I6CiOOWfbf9QtuAQwulWiI0bYtXdmST4Y4HZ8X7cx-dtn53rDuWyAZoGNXJPz4EGWcHocYItxNRThJf6mLOOURlqcqmAF7NKNcFm5HHOzCYmApFMVgL7Ncvd6DYm5w86fBGTplkZqQ8hYzcek6I_ZM5cHZ3qkg57qWsDHOd4U7iBcj4VLVR4NNPExdJ3McGJby5Nj1Btmg2ssiZtp6uMW-aHrLZE3F_n HTTP/1.1
Host: myckdom.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://dnavexch.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Sat, 15 Apr 2023 11:35:50 GMT
content-length: 0
set-cookie: rhid=83124523033; Max-Age=15552000; Expires=Thu, 12-Oct-2023 11:35:50 GMT; Domain=myckdom.com; Path=/; SameSite=None; secure;
location: https://p274639.myckdom.com/adServe/domainClick?ai=GNWsBy0vmeWNIRD1OGzon7Vvhmw8x6SrQ4fHSauR9o_Qff73Sp7GQtm5Ief_YFlN747bBwhY3xxfnlBzacdN-r3hgy3dtaeOMMIJT8Rrx9h2Zjf8078LTtX5464EfUFmI4XCXOQKRvPW9EEX_J_H8fRy_kAuFP4vbJQduvs_EIKkREFsP1kmGmGR_Fzr9SPkbzmVSFaMHe3iTwxi-sFfl37KXLO3pwZZSyneW2UxUueC8h0yb86BkQODAOxEq6xWvLGBG9zoQIGgDj2x4C6WO-qHaRwANaYP1MXD3USB7qIPdhGn3_C1Pimox5nI1XTBNP2djiFNkpwG9_hEhxtCR4NkbxMK5NnqWwu1N9EyadnthzdNBg_P5YpXBfefA_COYlZ0CBoMUA4lO7oBdjPsrloPX4wdlkeKtSLHLDCCFTC-K1oRdk9X8D3JmuEff5JupVPogxKmOtiOWG9t0FwuM44XRKiQejY9l5g72F1sPYafqhWZ-YKZz6rRPbGyYnCcF9nxG1Y8QfZKdkAM850vP-n44YFBbd7ECEomdw_Jheywpth3iNEvd_P4BsKUl697UgDHGPx9sdOxxaLzhkg6TSol4S5osn5YR0Ng4Sbb-ewIqJ00PG5Xmw&ui=HFz5zNIIs96w8gbO8AoGVPmI0xR1wwxSu6frWc09JCr-wsYRo_MDGtZ3CQIRouOpeFOiwu0F5iEg0_XbUELW3BsKR7ASgNJAakBTqnrGYykgsKnnPAStNA&si=1&oref=31e8a578c8b270d364d9ade6d75946f3&optunit=Wg9fjB2WR4ohaenArms0oA&rb=2Vb288azLYM&rr=0&abtg=0
X-Firefox-Spdy: h2
p274639.myckdom.com/adServe/domainClick?ai=GNWsBy0vmeWNIRD1OGzon7Vvhmw8x6SrQ4fHSauR9o_Qff73Sp7GQtm5Ief_YFlN747bBwhY3xxfnlBzacdN-r3hgy3dtaeOMMIJT8Rrx9h2Zjf8078LTtX5464EfUFmI4XCXOQKRvPW9EEX_J_H8fRy_kAuFP4vbJQduvs_EIKkREFsP1kmGmGR_Fzr9SPkbzmVSFaMHe3iTwxi-sFfl37KXLO3pwZZSyneW2UxUueC8h0yb86BkQODAOxEq6xWvLGBG9zoQIGgDj2x4C6WO-qHaRwANaYP1MXD3USB7qIPdhGn3_C1Pimox5nI1XTBNP2djiFNkpwG9_hEhxtCR4NkbxMK5NnqWwu1N9EyadnthzdNBg_P5YpXBfefA_COYlZ0CBoMUA4lO7oBdjPsrloPX4wdlkeKtSLHLDCCFTC-K1oRdk9X8D3JmuEff5JupVPogxKmOtiOWG9t0FwuM44XRKiQejY9l5g72F1sPYafqhWZ-YKZz6rRPbGyYnCcF9nxG1Y8QfZKdkAM850vP-n44YFBbd7ECEomdw_Jheywpth3iNEvd_P4BsKUl697UgDHGPx9sdOxxaLzhkg6TSol4S5osn5YR0Ng4Sbb-ewIqJ00PG5Xmw&ui=HFz5zNIIs96w8gbO8AoGVPmI0xR1wwxSu6frWc09JCr-wsYRo_MDGtZ3CQIRouOpeFOiwu0F5iEg0_XbUELW3BsKR7ASgNJAakBTqnrGYykgsKnnPAStNA&si=1&oref=31e8a578c8b270d364d9ade6d75946f3&optunit=Wg9fjB2WR4ohaenArms0oA&rb=2Vb288azLYM&rr=0&abtg=0
52.117.247.211302 Found 0 B URL User Request GET HTTP/2 p274639.myckdom.com/adServe/domainClick?ai=GNWsBy0vmeWNIRD1OGzon7Vvhmw8x6SrQ4fHSauR9o_Qff73Sp7GQtm5Ief_YFlN747bBwhY3xxfnlBzacdN-r3hgy3dtaeOMMIJT8Rrx9h2Zjf8078LTtX5464EfUFmI4XCXOQKRvPW9EEX_J_H8fRy_kAuFP4vbJQduvs_EIKkREFsP1kmGmGR_Fzr9SPkbzmVSFaMHe3iTwxi-sFfl37KXLO3pwZZSyneW2UxUueC8h0yb86BkQODAOxEq6xWvLGBG9zoQIGgDj2x4C6WO-qHaRwANaYP1MXD3USB7qIPdhGn3_C1Pimox5nI1XTBNP2djiFNkpwG9_hEhxtCR4NkbxMK5NnqWwu1N9EyadnthzdNBg_P5YpXBfefA_COYlZ0CBoMUA4lO7oBdjPsrloPX4wdlkeKtSLHLDCCFTC-K1oRdk9X8D3JmuEff5JupVPogxKmOtiOWG9t0FwuM44XRKiQejY9l5g72F1sPYafqhWZ-YKZz6rRPbGyYnCcF9nxG1Y8QfZKdkAM850vP-n44YFBbd7ECEomdw_Jheywpth3iNEvd_P4BsKUl697UgDHGPx9sdOxxaLzhkg6TSol4S5osn5YR0Ng4Sbb-ewIqJ00PG5Xmw&ui=HFz5zNIIs96w8gbO8AoGVPmI0xR1wwxSu6frWc09JCr-wsYRo_MDGtZ3CQIRouOpeFOiwu0F5iEg0_XbUELW3BsKR7ASgNJAakBTqnrGYykgsKnnPAStNA&si=1&oref=31e8a578c8b270d364d9ade6d75946f3&optunit=Wg9fjB2WR4ohaenArms0oA&rb=2Vb288azLYM&rr=0&abtg=0
IP 52.117.247.211:443
Certificate IssuerSectigo Limited
Subject*.myckdom.com
FingerprintC3:7B:F3:48:A1:46:69:95:EE:19:75:CE:1A:EA:F9:AD:EF:C7:25:77
ValidityMon, 20 Mar 2023 00:00:00 GMT - Wed, 20 Mar 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /adServe/domainClick?ai=GNWsBy0vmeWNIRD1OGzon7Vvhmw8x6SrQ4fHSauR9o_Qff73Sp7GQtm5Ief_YFlN747bBwhY3xxfnlBzacdN-r3hgy3dtaeOMMIJT8Rrx9h2Zjf8078LTtX5464EfUFmI4XCXOQKRvPW9EEX_J_H8fRy_kAuFP4vbJQduvs_EIKkREFsP1kmGmGR_Fzr9SPkbzmVSFaMHe3iTwxi-sFfl37KXLO3pwZZSyneW2UxUueC8h0yb86BkQODAOxEq6xWvLGBG9zoQIGgDj2x4C6WO-qHaRwANaYP1MXD3USB7qIPdhGn3_C1Pimox5nI1XTBNP2djiFNkpwG9_hEhxtCR4NkbxMK5NnqWwu1N9EyadnthzdNBg_P5YpXBfefA_COYlZ0CBoMUA4lO7oBdjPsrloPX4wdlkeKtSLHLDCCFTC-K1oRdk9X8D3JmuEff5JupVPogxKmOtiOWG9t0FwuM44XRKiQejY9l5g72F1sPYafqhWZ-YKZz6rRPbGyYnCcF9nxG1Y8QfZKdkAM850vP-n44YFBbd7ECEomdw_Jheywpth3iNEvd_P4BsKUl697UgDHGPx9sdOxxaLzhkg6TSol4S5osn5YR0Ng4Sbb-ewIqJ00PG5Xmw&ui=HFz5zNIIs96w8gbO8AoGVPmI0xR1wwxSu6frWc09JCr-wsYRo_MDGtZ3CQIRouOpeFOiwu0F5iEg0_XbUELW3BsKR7ASgNJAakBTqnrGYykgsKnnPAStNA&si=1&oref=31e8a578c8b270d364d9ade6d75946f3&optunit=Wg9fjB2WR4ohaenArms0oA&rb=2Vb288azLYM&rr=0&abtg=0 HTTP/1.1
Host: p274639.myckdom.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://dnavexch.com/
Connection: keep-alive
Cookie: rhid=83124523033
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx
date: Sat, 15 Apr 2023 11:35:50 GMT
content-length: 0
set-cookie: rhid=83124523033; Max-Age=15552000; Expires=Thu, 12-Oct-2023 11:35:50 GMT; Domain=myckdom.com; Path=/; SameSite=None; secure;
loi=ad_490233_off_142374_aff_3322_cid_274639-577783156-TIANXIAN2.COM_ts_1681558550; Max-Age=3600; Expires=Sat, 15-Apr-2023 12:35:50 GMT; Domain=myckdom.com; Path=/; SameSite=None; secure;
location: https://myfood.ltd/?v=20171031&s1=0
X-Firefox-Spdy: h2
myfood.ltd/?v=20171031&s1=0
151.139.128.10200 OK 2.9 kB URL User Request GET HTTP/2 myfood.ltd/?v=20171031&s1=0
IP 151.139.128.10:443
Certificate IssuerLet's Encrypt
Subjectmyfood.ltd
FingerprintBF:40:35:24:E7:9D:D5:E2:AA:AA:F6:59:6C:12:35:7B:EB:1D:C6:8E
ValidityWed, 22 Feb 2023 22:35:49 GMT - Tue, 23 May 2023 22:35:48 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (6859), with no line terminators
Hash 029ccb01ef612a9e6748494c60d24b69
d385f7671725be11701998c27571e94b1950f991
7ac429dc45b509b1bed9bdcdc5610868d510d979ce3cc06d48870511bf0425f5
GET /?v=20171031&s1=0 HTTP/1.1
Host: myfood.ltd
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://dnavexch.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 15 Apr 2023 11:35:50 GMT
cache-control: max-age=30
content-encoding: gzip
content-length: 2896
content-type: text/html
last-modified: Mon, 01 Mar 2021 09:43:13 GMT
accept-ranges: bytes
server: nginx
etag: W/"603cb731-1ad4"
x-hw: 1681558550.cds022.sk1.hn,1681558550.cds236.sk1.c
X-Firefox-Spdy: h2
myfood.ltd/images/Superfood_1.jpg
151.139.128.10200 OK 74 kB URL GET HTTP/2 myfood.ltd/images/Superfood_1.jpg
IP 151.139.128.10:443
Requested by https://myfood.ltd/?v=20171031&s1=0
Certificate IssuerLet's Encrypt
Subjectmyfood.ltd
FingerprintBF:40:35:24:E7:9D:D5:E2:AA:AA:F6:59:6C:12:35:7B:EB:1D:C6:8E
ValidityWed, 22 Feb 2023 22:35:49 GMT - Tue, 23 May 2023 22:35:48 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, copyright=Bigstock], progressive, precision 8, 800x420, components 3\012- data
Hash c2c3ec0e55e648c2a85d4499714a9c11
073f2990a52da59a7d3b73583b30be3c2cf45523
b66cf7365382753dc6340bfa2fba89c368ca3b930a0833d8f64c4c34525fc2ec
GET /images/Superfood_1.jpg HTTP/1.1
Host: myfood.ltd
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myfood.ltd/?v=20171031&s1=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 15 Apr 2023 11:35:50 GMT
cache-control: max-age=30
content-length: 74204
content-type: image/jpeg
last-modified: Mon, 01 Mar 2021 09:43:12 GMT
accept-ranges: bytes
server: nginx
etag: "603cb730-121dc"
x-hw: 1681558550.cds022.sk1.hn,1681558550.cds247.sk1.c
X-Firefox-Spdy: h2
myfood.ltd/main/css/style.css
151.139.128.10200 OK 19 kB URL GET HTTP/2 myfood.ltd/main/css/style.css
IP 151.139.128.10:443
Requested by https://myfood.ltd/?v=20171031&s1=0
Certificate IssuerLet's Encrypt
Subjectmyfood.ltd
FingerprintBF:40:35:24:E7:9D:D5:E2:AA:AA:F6:59:6C:12:35:7B:EB:1D:C6:8E
ValidityWed, 22 Feb 2023 22:35:49 GMT - Tue, 23 May 2023 22:35:48 GMT
File type Unicode text, UTF-8 text, with very long lines (65134), with no line terminators
Hash a95a0c8bd1273406b8c8053fb3527d56
2a461dcfa2c4bf1d22727bfd7c3c2abc85d44343
55b46146d32f4ee365d4ca91d8b3b1c504a062b15bbc1ed60a22ac2d05be1db5
GET /main/css/style.css HTTP/1.1
Host: myfood.ltd
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myfood.ltd/?v=20171031&s1=0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 15 Apr 2023 11:35:50 GMT
cache-control: max-age=30
content-encoding: gzip
content-length: 18933
content-type: text/css
last-modified: Mon, 01 Mar 2021 09:43:15 GMT
accept-ranges: bytes
server: nginx
etag: W/"603cb733-1b1ac"
x-hw: 1681558550.cds022.sk1.hn,1681558550.cds261.sk1.c
X-Firefox-Spdy: h2
myfood.ltd/images/avatar-1.jpg
151.139.128.10200 OK 11 kB URL GET HTTP/2 myfood.ltd/images/avatar-1.jpg
IP 151.139.128.10:443
Requested by https://myfood.ltd/?v=20171031&s1=0
Certificate IssuerLet's Encrypt
Subjectmyfood.ltd
FingerprintBF:40:35:24:E7:9D:D5:E2:AA:AA:F6:59:6C:12:35:7B:EB:1D:C6:8E
ValidityWed, 22 Feb 2023 22:35:49 GMT - Tue, 23 May 2023 22:35:48 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=12, height=128, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=128], progressive, precision 8, 128x128, components 3\012- data
Hash 62d0b6a649ac10e72bcb6ea3bbf57564
3e333889b0b66bfc6a32499f4c55878e2102b463
58dddc0a77632d920d096da6c6e2587c5859a4b4dd7af6dcd6eb8009ebc23ba6
GET /images/avatar-1.jpg HTTP/1.1
Host: myfood.ltd
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myfood.ltd/?v=20171031&s1=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 15 Apr 2023 11:35:50 GMT
cache-control: max-age=30
content-length: 11304
content-type: image/jpeg
last-modified: Mon, 01 Mar 2021 09:43:12 GMT
accept-ranges: bytes
server: nginx
etag: "603cb730-2c28"
x-hw: 1681558550.cds022.sk1.hn,1681558550.cds218.sk1.c
X-Firefox-Spdy: h2
myfood.ltd/images/Superfood_2.jpg
151.139.128.10200 OK 52 kB URL GET HTTP/2 myfood.ltd/images/Superfood_2.jpg
IP 151.139.128.10:443
Requested by https://myfood.ltd/?v=20171031&s1=0
Certificate IssuerLet's Encrypt
Subjectmyfood.ltd
FingerprintBF:40:35:24:E7:9D:D5:E2:AA:AA:F6:59:6C:12:35:7B:EB:1D:C6:8E
ValidityWed, 22 Feb 2023 22:35:49 GMT - Tue, 23 May 2023 22:35:48 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, copyright=Bigstock], progressive, precision 8, 800x341, components 3\012- data
Hash b87af7248a82f58fe2ea5d0c7b030886
1d5a5b9752d7978c68b0d4a1689b3d8e6d322f0a
14da8c39c357dad0441b26d575c0000a9529c76d785680306a3cf51abe4cae81
GET /images/Superfood_2.jpg HTTP/1.1
Host: myfood.ltd
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myfood.ltd/?v=20171031&s1=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 15 Apr 2023 11:35:50 GMT
cache-control: max-age=30
content-length: 51830
content-type: image/jpeg
last-modified: Mon, 01 Mar 2021 09:43:13 GMT
accept-ranges: bytes
server: nginx
etag: "603cb731-ca76"
x-hw: 1681558550.cds022.sk1.hn,1681558550.cds220.sk1.c
X-Firefox-Spdy: h2
myfood.ltd/images/avatar-2.jpg
151.139.128.10200 OK 11 kB URL GET HTTP/2 myfood.ltd/images/avatar-2.jpg
IP 151.139.128.10:443
Requested by https://myfood.ltd/?v=20171031&s1=0
Certificate IssuerLet's Encrypt
Subjectmyfood.ltd
FingerprintBF:40:35:24:E7:9D:D5:E2:AA:AA:F6:59:6C:12:35:7B:EB:1D:C6:8E
ValidityWed, 22 Feb 2023 22:35:49 GMT - Tue, 23 May 2023 22:35:48 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=12, height=128, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=128], progressive, precision 8, 128x128, components 3\012- data
Hash dd3881ed1b5b03b1d571edf89e12c466
61ca68c1c2d2ae7d286dfc0540f4ca8b357fdf3d
97b65e41dd547b310e1e860d2ae4717dba1d97bd36c0cd06c35749caa515e207
GET /images/avatar-2.jpg HTTP/1.1
Host: myfood.ltd
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myfood.ltd/?v=20171031&s1=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 15 Apr 2023 11:35:50 GMT
cache-control: max-age=30
content-length: 10665
content-type: image/jpeg
last-modified: Mon, 01 Mar 2021 09:43:12 GMT
accept-ranges: bytes
server: nginx
etag: "603cb730-29a9"
x-hw: 1681558550.cds022.sk1.hn,1681558550.cds202.sk1.c
X-Firefox-Spdy: h2
myfood.ltd/main/js/main.js
151.139.128.10200 OK 39 kB URL GET HTTP/2 myfood.ltd/main/js/main.js
IP 151.139.128.10:443
Requested by https://myfood.ltd/?v=20171031&s1=0
Certificate IssuerLet's Encrypt
Subjectmyfood.ltd
FingerprintBF:40:35:24:E7:9D:D5:E2:AA:AA:F6:59:6C:12:35:7B:EB:1D:C6:8E
ValidityWed, 22 Feb 2023 22:35:49 GMT - Tue, 23 May 2023 22:35:48 GMT
File type Unicode text, UTF-8 text, with very long lines (60220)
Hash 181e3fa3b1de97ff4efd259bc2a2c8c7
52edf1dc36109cb57bea12689a48442e27f06ad1
ffa8984bea3bf0c0a0cb282e9a5a98b3435e63fb6a26dfe0351979fa9f827c40
GET /main/js/main.js HTTP/1.1
Host: myfood.ltd
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myfood.ltd/?v=20171031&s1=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 15 Apr 2023 11:35:51 GMT
cache-control: max-age=30
content-encoding: gzip
content-length: 38656
content-type: application/javascript
last-modified: Mon, 01 Mar 2021 09:43:14 GMT
accept-ranges: bytes
server: nginx
etag: "603cb732-1d57b"
x-hw: 1681558550.cds022.sk1.hn,1681558550.cds228.sk1.c
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v15/DXI1ORHCpsQm3Vp6mXoaTegdm0LZdjqr5-oayXSOefg.woff2
216.58.207.227200 OK 15 kB URL GET HTTP/2 fonts.gstatic.com/s/opensans/v15/DXI1ORHCpsQm3Vp6mXoaTegdm0LZdjqr5-oayXSOefg.woff2
IP 216.58.207.227:443
Requested by https://myfood.ltd/?v=20171031&s1=0
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE8:8D:29:52:9C:44:66:28:BB:43:25:CE:11:45:BB:A1:5A:4E:44:11
ValidityTue, 28 Mar 2023 16:54:02 GMT - Tue, 20 Jun 2023 16:54:01 GMT
File type Web Open Font Format (Version 2), TrueType, length 14564, version 1.0\012- data
Hash 60c866748ff15f5b347fdba64596b1b1
34f486906decb7c8cf7a02d4758add9a2408c7a5
5278c0f6063ca9ad85653b18a2ddf1aa57e3ab40b7973a69b09acf859db8264d
GET /s/opensans/v15/DXI1ORHCpsQm3Vp6mXoaTegdm0LZdjqr5-oayXSOefg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://myfood.ltd
Connection: keep-alive
Referer: https://myfood.ltd/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14564
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 11 Apr 2023 11:37:46 GMT
expires: Wed, 10 Apr 2024 11:37:46 GMT
cache-control: public, max-age=31536000
age: 345485
last-modified: Wed, 11 Oct 2017 21:49:34 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v15/MTP_ySUJH_bn48VBG8sNSugdm0LZdjqr5-oayXSOefg.woff2
216.58.207.227200 OK 14 kB URL GET HTTP/2 fonts.gstatic.com/s/opensans/v15/MTP_ySUJH_bn48VBG8sNSugdm0LZdjqr5-oayXSOefg.woff2
IP 216.58.207.227:443
Requested by https://myfood.ltd/?v=20171031&s1=0
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE8:8D:29:52:9C:44:66:28:BB:43:25:CE:11:45:BB:A1:5A:4E:44:11
ValidityTue, 28 Mar 2023 16:54:02 GMT - Tue, 20 Jun 2023 16:54:01 GMT
File type Web Open Font Format (Version 2), TrueType, length 14544, version 1.0\012- data
Hash 223a277bd88d8a90c8cdf24cda0ad5f5
24234c1c81b3948758c1a0be8e5a65386ca94c52
d61b45b8b3cded238a65ee0aac4043b989f11cee56acfe5c889777f961f241a2
GET /s/opensans/v15/MTP_ySUJH_bn48VBG8sNSugdm0LZdjqr5-oayXSOefg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://myfood.ltd
Connection: keep-alive
Referer: https://myfood.ltd/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14544
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 13 Apr 2023 11:10:01 GMT
expires: Fri, 12 Apr 2024 11:10:01 GMT
cache-control: public, max-age=31536000
age: 174350
last-modified: Wed, 11 Oct 2017 21:49:52 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
myfood.ltd/favicon.ico
151.139.128.10200 OK 1.2 kB IP 151.139.128.10:443
Requested by https://myfood.ltd/?v=20171031&s1=0
Certificate IssuerLet's Encrypt
Subjectmyfood.ltd
FingerprintBF:40:35:24:E7:9D:D5:E2:AA:AA:F6:59:6C:12:35:7B:EB:1D:C6:8E
ValidityWed, 22 Feb 2023 22:35:49 GMT - Tue, 23 May 2023 22:35:48 GMT
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash b671b0407b8abf4ffb9946ee1596d992
79a116ffd13f1888451abd3cb8751cb2140f2fa4
1515616a51664df153b03397585ee45469cb936100992f870419514b17820649
GET /favicon.ico HTTP/1.1
Host: myfood.ltd
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myfood.ltd/?v=20171031&s1=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 15 Apr 2023 11:35:51 GMT
cache-control: max-age=30
content-length: 1150
content-type: image/x-icon
last-modified: Wed, 28 Mar 2018 14:00:16 GMT
accept-ranges: bytes
server: nginx
etag: "5abb9ff0-47e"
x-hw: 1681558551.cds022.sk1.hn,1681558551.cds240.sk1.c
X-Firefox-Spdy: h2
dnavexch.com/favicon.ico
0.0.0.0 0 B IP 0.0.0.0:0
Requested by http://dnavexch.com/click?data=cFRkVTVFeW5sLXRqZ09mRW9BUXhfNlMwRmItYkdwOVJKNTRQTHd2ZUV0VUhJUWVybjZxejJrRFZFZ1N0dkNDWjdxeU1IeFFZdTh6cVlkNG5IU3dfdkZmbTBtSWplTVRIRmpjd1dRdWs2TGtlSEkxWmRCU3hGTmxXOHk5TFhIZmc1QmZGSzhNVXZFZWZubG9PMGp0bWR3Mg2&id=8c342064-754e-45db-a1c4-a7895c9a917f
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: dnavexch.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dnavexch.com/click?data=cFRkVTVFeW5sLXRqZ09mRW9BUXhfNlMwRmItYkdwOVJKNTRQTHd2ZUV0VUhJUWVybjZxejJrRFZFZ1N0dkNDWjdxeU1IeFFZdTh6cVlkNG5IU3dfdkZmbTBtSWplTVRIRmpjd1dRdWs2TGtlSEkxWmRCU3hGTmxXOHk5TFhIZmc1QmZGSzhNVXZFZWZubG9PMGp0bWR3Mg2&id=8c342064-754e-45db-a1c4-a7895c9a917f
Cookie: FsRNnwkuFGMSJMg=FsRNnwkuFGMSJMg
Pragma: no-cache
Cache-Control: no-cache